General

  • Target
    e84207bf6dc29ab23ca8fc65a9cef8a1_JaffaCakes118
  • Size 1.4MB
  • Sample240408-yfenysaa56
  • SHA256 153656491e1b18db19af3982d72a0778fa8c13a65699404e939a81c92f3eac71
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • e84207bf6dc29ab23ca8fc65a9cef8a1_JaffaCakes118
    .dll 1.4MB

e84207bf6dc29ab23ca8fc65a9cef8a1_JaffaCakes118

  • IMPHASH 8e9ae2af1400518a7aec6fa54498710c
  • SHA256 153656491e1b18db19af3982d72a0778fa8c13a65699404e939a81c92f3eac71
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
f5:23:e0:9a:50:6e:d0:7c:8f:f7:d3:e6:a2:22:2d:33:63:99:b9:d5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=One Floor App,O=One Floor App,POSTALCODE=52573,STREET=2 Ben Gurion,L=Ramat Gan,ST=Israel,C=IL
Chains

Jun 3, 2015

Minor OS version
2
Major OS version
5
Entry point
797844
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
C:\Toolbar\Working\Bin\wtb_64.pdb